$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/52801AD8D07111ECAF21A75DC4F9AE02.roa File: 52801AD8D07111ECAF21A75DC4F9AE02.roa (raw, json) Hash identifier: LqXeoNf4rZXMYr+S4C+rSHRCOdc5ivPe/GH6EvrlUBU= Subject key identifier: A6:44:CA:DF:8E:B5:48:34:02:49:E8:0F:98:83:82:8C:2E:E0:79:61 Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 031F Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/52801AD8D07111ECAF21A75DC4F9AE02.roa Signing time: Thu 19 Jun 2025 01:17:01 +0000 ROA not before: Thu 19 Jun 2025 01:17:01 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132073 IP address blocks: 103.186.52.0/23 maxlen: 23 103.186.52.0/24 maxlen: 24 103.186.53.0/24 maxlen: 24 2001:df0:a140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 799 (0x31f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: Jun 19 01:17:01 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6853650d-e40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:16:22:1a:e7:ce:5a:db:6c:49:82:e4:89: 4c:27:11:9f:36:4e:c0:16:ed:3b:c9:c0:44:23:74: aa:d6:5a:72:a2:31:e1:6b:9e:8d:bb:96:26:d8:ca: 20:56:e6:19:b4:5f:b5:5e:11:cd:10:9a:54:4e:42: da:44:ec:e5:22:e5:f3:26:01:dd:b8:d0:1a:5d:0a: ff:93:e4:83:29:c5:77:01:d4:ac:d0:0c:72:88:d4: a7:c2:f6:66:bc:c4:b5:b7:7d:a4:79:d3:d9:37:84: 18:c3:45:06:91:f1:d6:71:a0:b8:e4:93:a2:01:c2: 8a:60:88:5b:c1:bb:2e:33:dd:ee:8e:65:d7:01:b9: c4:c8:07:e3:41:1f:77:ae:15:24:1d:13:b6:d6:15: 91:0a:89:d1:29:97:a8:75:40:18:16:e0:55:fb:3f: ac:0f:8b:e8:6d:0a:67:1b:a0:6e:b4:e5:c2:14:b9: 52:94:15:08:52:17:96:0c:42:14:f2:23:aa:28:b6: 14:c7:38:b1:f4:e3:47:f4:cf:ba:fe:e0:e9:84:e2: 93:e2:e8:1d:01:a4:ca:e5:d9:25:c5:af:57:20:7b: c1:be:7a:6a:17:45:02:6f:de:25:01:b4:ad:0b:0e: e7:b3:7e:fd:b2:6c:86:ff:8d:e7:74:52:f5:3b:5d: 57:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:44:CA:DF:8E:B5:48:34:02:49:E8:0F:98:83:82:8C:2E:E0:79:61 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/52801AD8D07111ECAF21A75DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.52.0/23 IPv6: 2001:df0:a140::/48 Signature Algorithm: sha256WithRSAEncryption 17:1f:38:ee:ae:b5:ec:20:0b:d4:58:e1:27:fd:80:b2:b7:22: 05:22:6a:6d:11:9e:36:b4:71:05:52:d8:6f:33:27:f6:c2:17: fe:e4:8e:07:ca:f6:c6:e9:16:90:d7:89:9f:5b:9b:d9:6d:8b: 66:93:97:43:fc:93:e5:54:44:5a:3f:7c:4e:a6:b7:12:c4:61: 33:10:85:87:ca:f5:13:0a:31:5c:a2:a8:1d:a6:21:32:51:ee: ba:59:f6:f9:cf:f9:e2:f7:d8:0c:ad:b9:c0:56:b6:34:81:62: 2f:f2:ab:8d:95:37:c4:ce:48:13:71:1c:7e:61:e6:53:22:9c: b0:86:38:ae:ed:8e:49:b0:ab:cf:a9:11:bb:dd:2a:ef:18:9c: d7:f6:c6:af:b7:8a:62:2f:49:0e:07:77:1c:67:52:e4:be:67: 5d:8f:e2:82:4a:7a:79:91:1a:d4:76:2a:ab:ea:c3:f7:bb:d0: 41:8e:8a:fd:9e:e3:0c:59:39:0d:28:e3:a5:82:a6:60:0f:f2: 4b:fa:d8:75:9e:d0:a3:02:e0:5f:cc:38:5b:a8:76:35:1b:f9: 1b:af:f7:e4:11:8d:46:d4:ed:cf:62:5b:f8:40:34:fb:b1:b8: da:8f:f8:86:af:a7:f1:88:ed:90:c3:e0:4f:64:07:b0:ab:25: 31:54:c8:fe -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjUwNjE5MDExNzAxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUzNjUwZC1lNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwIWIhrnzlrbbEmC5IlMJxGfNk7AFu07ycBEI3Sq1lpyojHha56Nu5Ym2Mog VuYZtF+1XhHNEJpUTkLaROzlIuXzJgHduNAaXQr/k+SDKcV3AdSs0AxyiNSnwvZm vMS1t32kedPZN4QYw0UGkfHWcaC45JOiAcKKYIhbwbsuM93ujmXXAbnEyAfjQR93 rhUkHRO21hWRConRKZeodUAYFuBV+z+sD4vobQpnG6ButOXCFLlSlBUIUheWDEIU 8iOqKLYUxzix9ONH9M+6/uDphOKT4ugdAaTK5dklxa9XIHvBvnpqF0UCb94lAbSt Cw7ns379smyG/43ndFL1O11X7wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKZEyt+O tUg0AknoD5iDgowu4HlhMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzYyNEMvQkI1MEQ5RDBEMDZDMTFFQ0IyQUFBQTM3QzRGOUFFMDIvNTI4MDFBRDhE MDcxMTFFQ0FGMjFBNzVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnujQwDwQCAAIwCQMHACABDfChQDANBgkqhkiG9w0BAQsF AAOCAQEAFx847q617CAL1FjhJ/2AsrciBSJqbRGeNrRxBVLYbzMn9sIX/uSOB8r2 xukWkNeJn1ub2W2LZpOXQ/yT5VREWj98Tqa3EsRhMxCFh8r1EwoxXKKoHaYhMlHu uln2+c/54vfYDK25wFa2NIFiL/KrjZU3xM5IE3EcfmHmUyKcsIY4ru2OSbCrz6kR u90q7xic1/bGr7eKYi9JDgd3HGdS5L5nXY/igkp6eZEa1HYqq+rD97vQQY6K/Z7j DFk5DSjjpYKmYA/yS/rYdZ7QowLgX8w4W6h2NRv5G6/35BGNRtTtz2Jb+EA0+7G4 2o/4hq+n8YjtkMPgT2QHsKslMVTI/g== -----END CERTIFICATE-----Generated at Thu Jul 3 09:57:43 2025 by rpki-client